Slacker News Slacker News logo featuring a lazy sloth with a folded newspaper hat
  • top
  • new
  • show
  • ask
  • jobs
Library

Comment by thewisenerd

1 day ago

path traversal and IDOR..

likely been active since the inception of these capabilities

wonder if the recommendation to "add randomness to resource names" is because of this (unrelated security by obscurity lol)

1 comment

thewisenerd

Reply

chinathrow  1 day ago

Gotta put these backdoors somewhere.

Slacker News

Product

  • API Reference
  • Hacker News RSS
  • Source on GitHub

Community

  • Support Ukraine
  • Equal Justice Initiative
  • GiveWell Charities